The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-112347: Themeum Kirki: Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST…7.6 High7.2 HighN/AOct 30, 2026
CVE-2026-119542: Red Hat: A flaw was found in the Ickle query parser in Infinispan4.3 MediumN/AN/AOct 30, 2026
CVE-2026-91912: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability7.3 HighN/AN/AOct 30, 2026
CVE-2026-119528: Red Hat: A flaw was found in GIMP7.8 HighN/AN/AOct 30, 2026
CVE-2026-91913: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an…8.8 HighN/AN/AOct 30, 2026
CVE-2026-111498: Dell OpenManage Enterprise: OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability4.7 MediumN/AN/AOct 30, 2026
CVE-2026-86715: Kriptek Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP: Plaintext storage of a password vulnerability in Kriptek Crypto and Informatics Technologies Industry and Trade Inc7.1 HighN/AN/AOct 30, 2026
CVE-2026-111499: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource…5.5 MediumN/AN/AOct 30, 2026
CVE-2026-91914: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability7.1 HighN/AN/AOct 30, 2026
CVE-2026-111500: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function…5.4 MediumN/AN/AOct 30, 2026
CVE-2026-115683: GNOME Epiphany: A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page6.8 MediumN/AN/AOct 30, 2026
CVE-2026-91915: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output…6.8 MediumN/AN/AOct 30, 2026
CVE-2026-91917: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability8.0 HighN/AN/AOct 30, 2026
CVE-2026-87768: Inefficient Algorithmic ComplexityN/AN/AN/AOct 30, 2026
CVE-2026-75882: ESET spol. s.r.o.: An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with…N/A8.5 HighN/AOct 30, 2026
CVE-2026-64860: Rejected reason: Further research determined the issue is not a vulnerability.N/AN/AN/AOct 30, 2026
CVE-2026-13576: Use of Password Hash With Insufficient Computational EffortN/AN/AN/AOct 30, 2026
CVE-2026-119038: Authorization Bypass Through User-Controlled KeyN/AN/AN/AOct 30, 2026
CVE-2026-119037: Improper Verification of Cryptographic SignatureN/AN/AN/AOct 30, 2026
CVE-2026-119036: Allocation of Resources Without Limits or ThrottlingN/AN/AN/AOct 30, 2026
CVE-2026-118996: Improper Removal of Sensitive Data Before Storage or TransferN/AN/AN/AOct 30, 2026
CVE-2026-118995: Permissive Regular ExpressionN/AN/AN/AOct 30, 2026
CVE-2026-118994: CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login nameN/AN/AN/AOct 30, 2026
CVE-2026-118993: Inefficient Regular Expression Complexity (ReDoS)N/AN/AN/AOct 30, 2026
CVE-2026-118992: OS Command InjectionN/AN/AN/AOct 30, 2026
1-25 of 423252
›